I've always loved Reese's since I was a kid. When I moved to another country a decade ago I went looking for Reese's to fill my home sick cravings but they all tasted like trash and I convinced myself they must be old/stale.

Come to discover in some recent trips back to the states that the problem was actually Reese's themselves, they all taste like stale garbage now.

When I think about eating a Reeses Peanut Butter Cup, I want to throw up. Turns out they have an additive in the chocolate that many people feel tastes like vomit.

Yeah normally the CF blog ranks as one of the best in the world in my book, so a post of lower quality and potentially AI slop really stands out here.

That said I think the concept of a full matrix server running all on CF infrastructure/services is an awesome blog post from CF.

Honestly I wish CF would simply unpublish/retract this blog post, put another engineer on it to help the PM, and spend another couple of weeks polishing the post/code to republish the same blog post.

Even acknowledging that blunder and the lost of trust that could have followed for such sloppy work would be a minimum.

I am quite shocked by such lack of care, and it does tarnish the reputation of Cloudflare in my eyes :/

    > You could also DM an offline friend a tracking pixel to reconstruct their activity, a lot of this endpoint security is entirely up to the user.

Only for as long as they have the steam chat window open and your tracking pixel/message is a recent enough message to be actually loaded. I don't use steam chat enough to remember if they do any of these, but your plan also ignores any possible automatic security/scanning/proxy shenanigans on steams part that will muddy your pixels tracking data or just break it.

    > That logic is acceptable. 

I completely disagree. I use invisible status all the time on steam. I very much have an expectation that when set to invisible my friends would not be able to track my online status.

I don't have any comments on their supposed slant, but I do know electrek.co articles often contain mistakes or inaccuracies.

When I comment on the articles or email their authors/editors about the inaccuracies they never respond, nor fix the article.

So yeah... Take anything on electrek.co with a grain of salt.

I love and use mullvad myself but I don't think they are very competitive for the average person. They mostly just care about getting around geo blocks on websites and streaming services, which mullvad puts 0 effort into facilitating.

If there is one old format that actually should have a revival, it's minidisk. I was really holding out for their production keep on until that revival came but they gave up the ghost this year.

Tiny digital CDs packaged in little neon jewel floppy disks is the neotokyo future we all deserve.

Did you get the UI scaling in PS CS2 working?

I wasn't able to so it's unusable for me on 4k or 1440p.

I can find a dozen solutions to sign a PDF on linux without much trouble. Now redacting seems a whole nother story.

I've failed to find even a single option on linux that does real PDF redaction like adobe acrobat. Most don't do redaction at all or worse they say they redact but it's actually just black highlighter on black text or some other kind of overlay that leaves the underlying text data intact.

It sounds good in theory but signal updates are beyond excessive, sometimes multiple times a day but almost certainly every few days.

Most of the time there is zero explanation for the update. They are just training their users to auto accept updates with no thought about why, which in itself is a security risk.

If signal really is pushing these updates for "security" then it must be one of the most insecure apps ever built. I legitimately can't think of another app or program that updates more frequently... Maybe youtube-dl?

  > It sounds good in theory but signal updates are beyond excessive

Those are two different arguments.

Updating too frequently is not equivalent to "doesn't need to be updated." I can agree that they update a bit too frequently but that's nowhere near the argument about never updating.

A program cannot be secure if it does not update. Full stop.

  > Most of the time there is zero explanation for the update

There's always a changelog.

If you, unlike most people, are interested it is all open source

  https://github.com/signalapp
  https://github.com/signalapp/libsignal/releases
  https://github.com/signalapp/Signal-Android/releases
  https://github.com/signalapp/Signal-iOS/releases
  https://github.com/signalapp/Signal-Desktop/releases

I would suggest looking at the actual commits and not just the release notes. Libsignal usually has more info about the security

  >  legitimately can't think of another app or program that updates more frequently

Probably because they do so silently.

That change log for android sucks - the same content for 20 releases or so...

You'll need to trawl through the actual commits it appears: https://github.com/signalapp/Signal-Android/commits/main/

Yes BUT I ALSO SAID

  >> I would suggest looking at the actual commits and not just the release notes

Last I looked a couple of years ago, GitHub 2fa has a lot of shoddy gotchas actually. There are a handful of GH issues on it with tons of comments.

For example it was impossible to remove/delete a phone number 2fa, even if you registered multiple other 2fa sources like security keys.